Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 12 Aug 2010 11:54:05 -0400
From: Brad Tilley <brad@...ystems.com>
To: john-users@...ts.openwall.com
Subject: Re: Consonant Vowel Patterns

websiteaccess@...il.com wrote:

>  About trigraph, digraph, stats.
> 
>  http://letterfrequency.org/

I'm not sure this is the same thing. Word and letter frequency (while
important) don't translate to popular CV patterns. Take an English
dictionary, for example, and run all the words in it through a CV
pattern generator placing your results into something like a C++
multi-set container. Then you can easily tell what patterns are
predominant. Some patterns are thousands of times more likely than others.

While the pattern CVCCVC is *very* frequent, many passwords it cracks
are not frequent at all. The other good thing about this approach is
that it recognizes non-word patterns often generated by password
generators that produce "pronounceable passwords"

KugHot
NakLut
WotRel
...

Also, pattern under 6 chars would be best left to brute force.

Brad



Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.